Who is the responsible body (“controller” in terms of the GDPR) and how can I contact the data protection officer?
RADOLID Thiel GmbH
You can contact our data protection officer which is JURANDO GmbH under firstname.lastname@example.org or by postal letter to our address; in the latter case, please add: “Att. data protection officer”.
Which are the rights you are entitled to?
You are entitled to the following rights which you can assert against us with respect to the personal data concerning you:
- Right to information/ access (Art. 15 GDPR),
- Right to rectification (Art. 16 GDPR),
- Right to erasure (Art. 17 GDPR),
- Right to restriction of processing (Art. 18 GDPR),
- Right to data portability (Art. 20 GDPR),
- Right to object to the processing (Art. 21 GDPR).
In addition, you have the right to lodge a complaint about us with a supervisory authority according to Art. 77 GDPR.
Where you have consented to the processing, you have the right to withdraw the consent at any time; however, the withdrawal of consent will not affect the lawfulness of processing based on the consent before its withdrawal.
For what purposes do we process personal data and what is the legal basis for the processing?
When you visit our website
When you visit our website for mere information purposes, i.e. when you do not register or otherwise transfer or disclose information to us, we only collect those personal data which your browser transfers to us. This includes (to be agreed with the person in charge of your website)
- IP address
- Date and time of access
- Details of the query (specific page accessed)
- Access status/HTTP status code
- Website from which the query is made (so-called “referrer”)
- Operating system and its surface
- Language and version of the browser software.
We also store this data including the IP address as log files.
We require this data for technical reasons to be able to display our website, ensure stability and security and optimize our presentation.
The legal basis for this is Art. 6 subs. 1 f) GDPR; our legitimate interest consists in the afore-mentioned purposes.
We erase this data after seven days at the latest. We will only store data beyond that time after the personal data has been erased or anonymized. In the case of IP addresses, anonymization can be procured by appropriate shortening of the IP address.
When you use our contact form, we will use the data you have transferred to us; the only information you must necessarily disclose to us is a valid email address, all other information is disclosed to us voluntarily to enable us to answer your request. The information you disclose to us may be stored in a Customer Relationship Management System (“CRM system”) or similar software.
Data processing for the purposes of communication is based on Art. 6 subs. 1 b) GDPR if and to the extent that your request pertains to the performance of contractual duties or initial approaches for contract conclusion (“taking steps prior to entering into a contract”). In other cases, the legal basis is Art. 6 subs. 1 f) GDPR; our legitimate interest consists in the purposes mentioned above.
The personal data we collect when you use the contact form are deleted automatically after your request has been settled unless we are required by law to retain the data or we need the data for contract performance. You may also at any time object to the processing when the processing is based on a legitimate interest.
When you contact us via the email addresses we have indicated for such purpose, we will store the personal data you have transferred to us in order to answer your requests. The information you have provided to us might be stored in a Customer Relationship Management System (“CRM system”) or similar software.
In the course of transporting or delivering your e-mail, log data is also generated on a regular basis, which, for example, also contains the IP address of the e-mail server you are using. These log data are necessary for ensuring the proper operation of our e-mail server and also serve as proof of server problems or security incidents.
The legal basis for this is Art. 6 subs. 1 f) GDPR; our legitimate interest consists in the purposes mentioned above. Where the email by which you contact us is aimed at contract conclusion or when you send us an email in the context of an existing contractual relationship, the legal basis is Art. 6 subs. 1 b) GDPR.
The data is deleted after the request has been finally settled unless we are required by law to retain the data or we need the data for contract performance. You can also at any time object to the processing when the processing is based on a legitimate interest.
When you transfer your application to us, we will process the transferred data to perform our (pre-)contractual duties in the context of the application procedure. If your application is successful, we further process the data for the purpose of handling and executing the employment relationship.
The legal basis is Art. 6 subs. 1 b) GDPR as well as § 26 of the German Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG). If you voluntarily transfer to us special categories of personal data such as health data or religion, also Art. 9 subs. 2 b) GDPR serves as legal basis.
If your application is not successful, we will delete your data after six months at the latest.
Until that time, the data is stored to answer any possible queries relating to the application procedure and to comply with our documentation duties under the German Equal Treatment Act (Allgemeines Gleichbehandlungsgesetz – AGG). If you withdraw your application, we will delete your data immediately.
This website uses the Google services described in more detail below, which are provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
The information generated as part of the use of the services can be transmitted to a Google server in the USA and stored there.
For the exceptional cases in which personal data are transferred to the USA, Google has submitted to the EU-US Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
We use Google Maps on this website. For this purpose, we set an external link and set an attribute in the link definition, through which no referrer data is transmitted in modern browsers, so that the origin of the request, i.e. your IP address, is not transmitted. If the browser you are using does not support this function, your IP address will be transmitted.
The legal basis for the use of Google Maps is Art. 6 Para. 1 lit. f GDPR, whereby our legitimate interest arises from the fact that we want to give you quick access to Google Maps for marketing reasons.
We have embedded YouTube videos in our online presentation which are stored on http://www.youtube.com and can be started and played back directly from our website. This service is provided by Google.
All videos are embedded in an “enhanced data protection mode” which means that no data concerning you as the user is transferred to YouTube if you do not play back the videos. Only when you play back the videos, the data mentioned in the following paragraph will be transferred to YouTube. We cannot influence this data transfer.
When you visit our website, YouTube is informed that you have accessed the relevant page of our website. In addition, the data collected during your visit to our website is transferred, too. This happens regardless of whether YouTube provides a user account via which you are logged in or a user account does not exist. When you are logged in to YouTube, your data is directly allocated to your account. If you do not want your data to be allocated to your profile, you have to log out before you activate the button. YouTube stores your data as user profiles and uses them for advertising and market research purposes and/or to tailor its website to the users’ demands. The analysis in particular serves to display customized advertisements (also for users who are not logged in) and to inform other users of the social network about your activities on our website. You have the right to object to, and thus prevent, the preparation of user profiles; if you want to exercise this right, you have to address your objection to YouTube.
The legal basis for embedding YouTube videos is Art. 6 subs. 1 f) GDPR. Our legitimate interest consists in the marketing purposes we pursue. If and to the extent that you give your consent by clicking the video, the legal basis is Art. 6 subs. 1 a) GDPR.